CVE-2023-2786

Summary

CVE-2023-2786 is a vulnerability affecting Mattermost, a popular open-source team collaboration platform. This issue allows members with no permissions to post messages in channels by executing certain commands. Despite the lack of necessary permissions, these members can successfully submit messages due to Mattermost's failure to adequately verify permissions during command execution. This security weakness poses a risk for unauthorized access and information disclosure within affected channels.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.